Kong Plugin

Overview

The bigeye-kong-plugin is a Kong Gateway plugin that enforces Bigeye data access policies on every request passing through a route or service where the plugin is enabled. For each incoming request, the plugin calls Bigeye's access-decision API and blocks the request with a 403 Access Denied response if access is denied. The plugin is fail-open: if Bigeye is unreachable or returns an unexpected response, the request is allowed through.

The plugin also supports deployment as a Kong AI Gateway AI Custom Policy, enabling Bigeye access controls on AI Gateway traffic (e.g. requests to OpenAI, Anthropic, and other AI backends).

Quick start

The plugin is configured with your Bigeye instance URL, workspace ID, and credentials. Provide either an API key or username + password for authentication:

plugins:
  - name: bigeye-kong-plugin
    service: your-service-name
    config:
      bigeye_url: https://bigeye.example.com
      api_key: your-bigeye-api-key
      workspace_id: 12345

Full documentation

For installation instructions, all configuration options, context extraction details, and deployment guides (Kong Admin API, declarative config, and Kong AI Gateway), see the full README in the bigeye-kong-plugin GitHub repository.